Sally Beauty Holdings Inc. Suffers From Security Breach, Some Payment Cards Confirmed To Be At Risk

Sally Beauty Holdings Inc. had a security breach earlier this year specifically the period between March 6 to April 17 and in the latest statement issued by the company, they noted that some payment cards of their customers have been affected and are at risk.

Sally Beauty Holdings shared that the people responsible for the security breach used a malware and the payment card information of some of their customers who used their payment cards at the affected branches of the company are at risk.

However, the beauty supply company assured their customers that their personal identification number has not been impacted. The Denton-based company pointed out that they do not collect PIN data so customer's PIN information is safe.

Sally Beauty Holdings Inc.'s President and CEO Chris Brickman said in a statement obtained by Dallas Business Journal, "Because we cannot pinpoint exactly which cards might have been affected during our reported date range, we are offering credit monitoring services to any customer who used their payment card at a U.S. Sally Beauty store between March 6 and April 17 of 2015."

The credit monitoring services offered by the company can be reached by concerned customers via calling 1-866-234-9442 or e-mailing the company's customer support, which is ustomerserviceinquiry@sallybeauty.com.

The company also said that the malware was already deleted from their system so there are no other affected card payments after the said period. This is not the first time that Sally Beauty Holdings suffered from a system breach as back in March 2014, the company's customer records of around 25,00 were stolen.

This second security breach was confirmed only on May 14 this year as there were reports of unusual activity involving the payment cards of some of their customers. The beauty product retailer has over 4,900 stores worldwide.

Other retailers that have suffered from security breaches include Home Depot Inc. and Target Corp. These incidents resulted to merchants being asked to upgrade their system's security.